Hexstrike-redteam - AI驱动的MCP渗透测试框架com

项目说明

<di="center">

<img src="assets/REDTEAM.png" alt="HexStrike RedTeam Logo" width="400" style="margin-bottom: 20px;"/>

HexStrike AI RED-TEAM

AI-Powered MCP Cybersecurity Automation Platform with BOAZ Red Team Integration

![Python]()

Ad AI-powered penetration testing MCP framework with 127 security tools (53 auto-installed), 12+ autonomous AI agents, and BOAZ red team payload e (77+ loaders, 12 encoders)

📋 What's New • 🏗️ Architecture • 🚀 Installation • 🛠️ Features • 🤖 AI Agents • 📡 API Reference

</div>

---

🔥 BOAZ Red Team Integration

HexStrike now includes BOAZ, an ad payload e framework for red team operations:

BOAZ Features

77+ Process Injection Loaders - Syscall, stealth, memory guard, threadless, and VEH/

12 Encoding Schemes - AES, ChaCha20, UUID, XOR, MAC, RC4, and more

EDR/A - API unhooking, ETW patching, LL (Akira/Pluto)

Anti-Analysis - Anti-emulation checks, sleep obfuscation, entropy reduction

Binary Analysis - Entropy analysis and optimization for heuristic e

BOAZ Capabilities in Action

<di="center">

#### EDR/A Demonstration
BOAZ-generated payload successfully bypassing ESET Smart Security Premium

<img src="assets/EDRbypass.png" alt="BOAZ EDR Bypass" width="800"/>

*Payload with stealth injection techniques e real-time protection and maintaining low detection profile*

---

#### MSFVenom Payload Obfuscation
Complete workflow: MSFVenom generation → BOAZ e → Enterprise-grade stealth payload

<img src="assets/Hex-Boaz.png" alt="BOAZ MSFVenom Obfuscation" width="900"/>

*Demonstrates BOAZ transforming standard MSFVenom payloads into sophisticated e binaries with:*

Loader #16 (Standard stealth injection)

UUID Encoding (Low entropy, legitimate-looking format)

ETW Bypass (Event Tracing for Windows patching)

Anti-Emulation (Sandbox detection)

Entropy: 6.06/8 (Excellent for bypassing heuristic analysis)

</div>

---

Architecture O

HexStrike AI MCP v6.0 features a multi-agent architecture with autonomous AI agents, intelligent decision-making, and intelligence.

How It Works

1. AI Agent Connection - Claude, GPT, or other MCP-compatible agents connect protocol
2. Intelligent Analysis - Decision engine analyzes targets and selects optimal testing strategies
3. Autonomous Execution - AI agents execute comprehensi assessments using 150+ tools
4. Real-time Adaptation - System adapts based on results and discovered
5. BOAZ Payload Generation - Ad payload e with 77+ loaders, 12 encoders, and EDR/A
6. Ad Reporting - output with cards and risk analysis

---

Installation

Quick Setup to Run the hexstrike MCPs Server

Installation and Setting Up Guide for AI Clients:

#### Installation & Demo Video

Watch the full installation and setup walkthrough here: YouTube - HexStrike AI Installation & Demo

#### Supported AI Clients for Running & Integration

You can install and run HexStrike AI MCPs with AI clients, including:

5ire (Latest v0.14.0 not supported for now)

VS Code Copilot

Roo Code

Cursor

Claude Desktop

Any MCP-compatible agent

Refer to the video above for step-by-step instructions and integration examples for these platforms.

Install Security Tools

Automated Installation (Recommended):

Run the installation script to automatically install 53 essential security tools:

This installs:

System dependencies (MinGW, Wine, NASM, build tools)

70+ security tools (53 currently working, see breakdown below)

Python en with all dependencies

BOAZ LL (Akira + Pluto)

MCP configuration for Claude Desktop/CLI

What Gets Auto-Installed (53 Tools):

<details>
<summary><b>✓ Network & Reconnaissance (10 tools)</b></summary>

nmap, masscan, rustscan, amass, subfinder, nuclei

autorecon, thehar, responder, netexec, enum4linux-ng

</details>

<details>
<summary><b>✓ Web Application Security (19 tools)</b></summary>

gobuster, feroxbuster, ffuf, nikto, sqlmap, wpscan

httpx, hakrawler, arjun, wafw00f, dalfox

gau, waybackurls, paramspider, anew, sublist3r

jwt-tool, testssl.sh, commix, nosqlmap

</details>

<details>
<summary><b>✓ Password & Authentication (5 tools)</b></summary>

hydra, john, hashcat, e, hashid

</details>

<details>
<summary><b>✓ Binary Analysis & RE (13 tools)</b></summary>

gdb, radare2, binwalk, ghidra (JDK only), checksec

strings, objdump, , ropgadget, one-gadget

pwninit, angr, pwntools

</details>

<details>
<summary><b>✓ Forensics (16 tools)</b></summary>

foremost, testdisk, steghide, exiftool, scalpel

sleuthkit, stegsol, photorec,

</details>

<details>
<summary><b>✓ OSINT & Intelligence (13 tools)</b></summary>

sherlock, recon-ng, spiderfoot, trufflehog

amass, subfinder, thehar, shodan-cli

</details>

<details>
<summary><b>✓ Cloud Security (10 tools)</b></summary>

prowler, tri, azure-cli, gcloud, kubectl

docker-bench-security

</details>

<details>
<summary><b>✓ Metasploit Framework</b></summary>

msfconsole, msfvenom, searchsploit (exploit-db)

</details>

</details>

Tools Requiring Manual Installation (74 tools):

Some specialized tools require manual installation due to licensing, dependencies, or system requirements:

Wireless: aircrack-ng suite, kismet, wireshark, tshark

Cloud: kube-hunter, kube-bench, scout-suite, checko, falco, clair

Web: dirsearch, dirb, burp suite, zaproxy, jaeles, x8, wfuzz, xsser

Password: medusa, patator, crackmapexec, ophcrack, hashcat-utils, hashpump

Binary: ropper, libc-database

OSINT: maltego, censys-cli, ha, social-analyzer

Network: arp-scan, nbtscan, rpcclient, smbmap, enum4linux (classic), fierce, dnsenum, tshark

API: insomnia, postman, httpie

Forensics: autopsy, bulk-extractor, outguess

Additional: qsreplace, uro

Installation Notes:

Installation script works on any Linux system (portable paths)

No hardcoded user paths - works for all users

Some tools may fail on certain distributions (fallbacks included)

Full installation takes ~60-90 minutes (LL)

Requires ~24GB disk space

See install/README.md for troubleshooting

Browser Agent Requirements:

Start the Server

Installation

---

AI Client Integration Setup

Claude Desktop Integration or Cursor

Edit ~/.config/Claude/claude_desktop_config.json:

VS Code Copilot Integration

Configure VS Code settings in ./settings.json:

---

BOAZ Capabilities in Action

<di="center">

#### EDR/A Demonstration
BOAZ-generated payload successfully bypassing ESET Smart Security Premium

<img src="assets/EDRbypass.png" alt="BOAZ EDR Bypass" width="800"/>

*Payload with stealth injection techniques e real-time protection and maintaining low detection profile*

---

#### MSFVenom Payload Obfuscation
Complete workflow: MSFVenom generation → BOAZ e → Enterprise-grade stealth payload

<img src="assets/Hex-Boaz.png" alt="BOAZ MSFVenom Obfuscation" width="900"/>

*Demonstrates BOAZ transforming standard MSFVenom payloads into sophis
---

BOAZ MCP Tools

Critical Workflow (files MUST be in BOAZ_beta directory):

Other BOAZ Tools:

Important Notes:

Choose loader based on e requirements, not reliability

Some loaders may fail compilation with newer mingw - try alternatives

Use boaz_list_loaders(category="...") to browse loaders by technique

ALL file paths are relative to BOAZ_beta directory

Input files MUST be inside BOAZ_beta/ (security requirement)

Output files go to BOAZ_beta/output/ (e.g., hexstrike-ai/BOAZ_beta/output/e.exe)

The AI will receive the full absolute path in result['output_path'] when generation succeeds

Check result['success'] after generation to compilation

Loader Categories

| Category | Count | Description |
|----------|-------|-------------|
| Syscall | 11 | Direct syscalls to bypass userland hooks |
| Stealth | 17 | Ad memory scan e techniques |
| Memory Guard | 6 | Breakpoint handlers and ROP trampolines |
| Threadless | 6 | Module stomping and injection |
| VEH/VCH | 5 | Exception handler-based injection |
| Userland | 4 | Standard Windows API injection |

Credits: BOAZ Framework by thomasxm/Boaz_beta

---

Features

Security Tools Arsenal

127 Professional Security Tools (53 Auto-Installed via install_security_tools.sh):

> Note: The installation script (install/install_security_tools.sh) automatically installs 53 essential tools. Additional tools can be manually installed as needed. See installation guide for details.

<details>
<summary><b>🔍 Network Reconnaissance & Scanning (25+ Tools)</b></summary>

Nmap - Ad port scanning with custom NSE scripts and service detection

Rustscan - Ultra-fast port scanner with intelligent rate limiting

Masscan - High-speed Internet-scale port scanning with banner grabbing

AutoRecon - Comprehensi reconnaissance with 35+ parameters

Amass - Ad subdomain enumeration and OSINT gathering

Subfinder - Fast passi discovery with multiple sources

Fierce - DNS reconnaissance and zone transfer testing

DNSEnum - DNS information gathering and subdomain brute forcing

TheHar - Email and subdomain har from multiple sources

ARP-Scan - Network discovery using ARP requests

NBTScan - NetBIOS name scanning and enumeration

RPCClient - RPC enumeration and null session testing

Enum4linux - SMB enumeration with user, group, and share discovery

Enum4linux-ng - Ad SMB enumeration with enhanced logging

SMBMap - SMB share enumeration and exploitation

Responder - LLMNR, NBT-NS and MDNS poisoner for credential har

NetExec - Network service exploitation framework (formerly CrackMapExec)

</details>

<details>
<summary><b>🌐 Web Application Security Testing (40+ Tools)</b></summary>

Gobuster - Directory, file, and DNS enumeration with intelligent wordlists

Dirsearch - Ad directory and file discovery with enhanced logging

Feroxbuster - Recursi discovery with intelligent filtering

FFuf - Fast web fuzzer with ad filtering and parameter discovery

Dirb - Comprehensive web content scanner with recursi

HTTPx - Fast HTTP probing and technology detection

Hakrawler - Fast web endpoint discovery and crawling

Gau - Get All URLs from multiple sources (Wayback, Common Crawl, etc.)

Waybackurls - Historical URL discovery from Wayback Machine

Nuclei - Fast scanner with 4000+ templates

Nikto - Web ser scanner with comprehensi

SQLMap - Ad automatic SQL injection testing with tamper scripts

WPScan - WordPress security scanner with database

Arjun - HTTP parameter discovery with intelligent fuzzing

ParamSpider - Parameter mining from web archives

X8 - Hidden parameter discovery with ad techniques

Jaeles - Ad scanning with custom signatures

Dalfox - Ad XSS scanning with DOM analysis

Wafw00f - Web application firewall fingerprinting

TestSSL - SSL/TLS configuration testing and assessment

SSLScan - SSL/TLS cipher suite enumeration

SSLyze - Fast and comprehensive SSL/TLS configuration analyzer

Anew - Append new lines to files for efficient data processing

QSReplace - Query string parameter replacement for systematic testing

Uro - URL filtering and deduplication for efficient testing

Whatweb - Web technology identification with fingerprinting

JWT-Tool - JSON Web Token testing with algorithm confusion

GraphQL- - GraphQL schema exploration and introspection testing

Burp Suite Extensions - Custom extensions for ad web testing

ZAP Proxy - OWASP ZAP integration for automated security scanning

Wfuzz - Web application fuzzer with ad payload generation

Commix - Command injection exploitation tool with automated detection

NoSQLMap - NoSQL injection testing for MongoDB, CouchDB, etc.

Tplmap - Ser template injection exploitation tool

🌐 Ad Browser Agent:

Headless Chrome Automation - Full Chrome browser automation with Selenium

Screenshot Capture - Automated screenshot generation for inspection

DOM Analysis - Deep DOM tree analysis and Ja execution monitoring

Network Traffic Monitoring - Real-time network request/response logging

Security Header Analysis - Comprehensi header

Form Detection & Analysis - Automatic form discovery and input field analysis

Ja Execution - Dynamic content analysis with full Ja support

Proxy Integration - Seamless integration with Burp Suite and other proxies

Multi-page Crawling - Intelligent web application spidering and mapping

Performance Metrics - Page load times, resource usage, and optimization insights

</details>

<details>
<summary><b>🔐 Authentication & Password Security (12+ Tools)</b></summary>

Hydra - Network login cracker supporting 50+ protocols

John the Ripper - Ad password hash cracking with custom rules

Hashcat - World's fastest password recovery tool with GPU acceleration

Medusa - Speedy, parallel, modular login brute-forcer

Patator - Multi-purpose brute-forcer with ad modules

NetExec - Swiss army knife for pentesting networks

SMBMap - SMB share enumeration and exploitation tool

E - Windows Remote Management shell with PowerShell integration

Hash-Identifier - Hash type identification tool

HashID - Ad hash algorithm identifier with confidence scoring

CrackStation - Online hash lookup integration

Ophcrack - Windows password cracker using rainbow tables

</details>

<details>
<summary><b>🔬 Binary Analysis & Reverse Engineering (25+ Tools)</b></summary>

GDB - GNU Debugger with Python scripting and exploit de support

GDB-PEDA - Python Exploit De Assistance for GDB

GDB-GEF - GDB Enhanced Features for exploit de

Radare2 - Ad reverse engineering framework with comprehensi

Ghidra - NSA's software reverse engineering suite with headless analysis

IDA Free - Interacti with ad analysis capabilities

Binary Ninja - Commercial reverse engineering platform

Binwalk - Firmware analysis and extraction tool with recursi

ROPgadget - ROP/JOP gadget finder with ad search capabilities

Ropper - ROP gadget finder and exploit de tool

One-Gadget - Find one-shot RCE gadgets in libc

Checksec - Binary security property checker with comprehensi

Strings - Extract printable strings from binaries with filtering

Objdump - Display object file information with Intel syntax

Readelf - ELF file analyzer with detailed header information

XXD - Hex dump utility with ad formatting

Hexdump - Hex and editor with customizable output

Pwntools - CTF framework and exploit de library

Angr - Binary analysis platform with symbolic execution

Libc-Database - Libc identification and offset lookup tool

Pwninit - Automate binary exploitation setup

- Ad memory forensics framework

MSFVenom - Metasploit payload generator with ad encoding

UPX - Executable packer/unpacker for binary analysis

</details>

<details>
<summary><b>☁️ Cloud & Container Security (20+ Tools)</b></summary>

Prowler - AWS/Azure/GCP security assessment with compliance checks

Scout Suite - Multi-cloud security auditing for AWS, Azure, GCP, Alibaba Cloud

CloudMapper - AWS network and security analysis

Pacu - AWS exploitation framework with comprehensi

Trivy - Comprehensi scanner for containers and IaC

Clair - Container analysis with detailed C

Kube-Hunter - Kubernetes penetration testing with acti modes

Kube-Bench - CIS Kubernetes benchmark checker with remediation

Docker Bench Security - Docker security assessment following CIS benchmarks

Falco - Runtime security monitoring for containers and Kubernetes

Checkov - Infrastructure as code security scanning

Terrascan - Infrastructure security scanner with policy-as-code

CloudSploit - Cloud security scanning and monitoring

AWS CLI - Amazon Web Services command line with security operations

Azure CLI - Microsoft Azure command line with security assessment

GCloud - Google Cloud Platform command line with security tools

Kubectl - Kubernetes command line with security context analysis

Helm - Kubernetes package manager with security scanning

Istio - Service mesh security analysis and configuration assessment

OPA - Policy engine for cloud-nati and compliance

</details>

<details>
<summary><b>🏆 CTF & Forensics Tools (20+ Tools)</b></summary>

- Ad memory forensics framework with comprehensi

- Next-generation memory forensics with enhanced analysis

Foremost - File carving and data recovery with signature-based detection

PhotoRec - File recovery software with ad carving capabilities

TestDisk - Disk partition recovery and repair tool

Steghide - Steganography detection and extraction with password support

Stegsolve - Steganography analysis tool with inspection

Zsteg - PNG/BMP steganography detection tool

Outguess - Uni steganographic tool for JPEG images

ExifTool - Metadata reader/writer for file formats

Binwalk - Firmware analysis and reverse engineering with extraction

Scalpel - File carving tool with configurable headers and footers

Bulk Extractor - Digital forensics tool for extracting features

Autopsy - Digital forensics platform with timeline analysis

Sleuth Kit - Collection of command-line digital forensics tools

Cryptography & Hash Analysis:

John the Ripper - Password cracker with custom rules and ad modes

Hashcat - GPU-accelerated password recovery with 300+ hash types

Hash-Identifier - Hash type identification with confidence scoring

CyberChef - Web-based analysis toolkit for encoding and encryption

Cipher-Identifier - Automatic cipher type detection and analysis

Frequency-Analysis - Statistical cryptanalysis for substitution ciphers

RSATool - RSA key analysis and common attack implementations

FactorDB - Integer factorization database for cryptographic challenges

</details>

<details>
<summary><b>🔥 Bug Bounty & OSINT Arsenal (20+ Tools)</b></summary>

Amass - Ad subdomain enumeration and OSINT gathering

Subfinder - Fast passi discovery with API integration

Hakrawler - Fast web endpoint discovery and crawling

HTTPx - Fast and multi-purpose HTTP toolkit with technology detection

ParamSpider - Mining parameters from web archives

Aquatone - inspection of websites across hosts

Subjack - Subdomain takeo checker

DNSEnum - DNS enumeration script with zone transfer capabilities

Fierce - Domain scanner for locating targets with DNS analysis

TheHar - Email and subdomain har from multiple sources

Sherlock - Username in across 400+ social networks

Social-Analyzer - Social media analysis and OSINT gathering

Recon-ng - Web reconnaissance framework with modular architecture

Maltego - Link analysis and data mining for OSINT in

SpiderFoot - OSINT automation with 200+ modules

Shodan - Internet-connected device search with ad filtering

Censys - Internet asset discovery with certificate analysis

Have I Been Pwned - Breach data analysis and credential exposure

Pipl - People search engine integration for identity in

TruffleHog - Git repository secret scanning with entropy analysis

</details>

<details>
<summary><b>🔥 BOAZ Red Team Payload E (5 MCP Tools)</b></summary>

Ad Payload E Framework with 77+ Loaders and 12 Encoders:

boaz_generate_payload - Generate e payloads with full parameter control

- 77+ Process Injection Loaders (Syscall, Stealth, Memory Guard, Threadless, VEH/VCH)
- 12 Encoding Schemes (AES, ChaCha20, UUID, XOR, MAC, RC4, base64/58/45, DES)
- EDR/A (API unhooking, ETW patching, LL)
- Anti-Analysis (Anti-emulation, sleep obfuscation, entropy reduction)
- Compiler Options (MinGW, Pluto, Akira LL)
- Output Formats (EXE, DLL, CPL)
- Ad Features (Self-deletion, anti-forensic, certificate signing)

boaz_list_loaders - List all 77+ process injection loaders

- Filter by category: syscall, stealth, memory_guard, threadless, , userland
- Detailed descriptions and technique information
- Compatibility and requirements for each loader

boaz_list_encoders - List all 12 encoding schemes

- Encryption: AES, ChaCha20, DES, RC4, AES2
- Encoding: UUID, XOR, MAC, IPv4, Base45, Base64, Base58
- Performance and detection characteristics

boaz_analyze_binary - Analyze payload entropy for AV/EDR e

- Shannon entropy calculation
- Heuristic detection probability
- Optimization recommendations

boaz_ - BOAZ configuration before payload generation

- Loader compatibility checking
- Encoding scheme
- Compiler and parameter

</details>

AI Agents

12+ Specialized AI Agents:

IntelligentDecisionEngine - Tool selection and parameter optimization

BugBountyWorkflowManager - Bug bounty hunting workflows

CTFWorkflowManager - CTF challenge solving

C - intelligence

AIExploitGenerator - Automated exploit de

- Attack chain discovery

TechnologyDetector - Technology stack identification

RateLimitDetector - Rate limiting detection

FailureReco - Error handling and recovery

PerformanceMonitor - System optimization

ParameterOptimizer - Context-aware optimization

GracefulDegradation - Fault-tolerant operation

Ad Features

Smart Caching System - Intelligent result caching with LRU e

Real-time Process Management - Li control and monitoring

Intelligence - C and exploit analysis

Browser Agent - Headless Chrome automation for web testing

API Security Testing - GraphQL, JWT, REST API security assessment

Modern Engine - Real-time dashboards and progress tracking

---

API Reference

Core System Endpoints

| Endpoint | Method | Description |
|----------|--------|-------------|
| /health | GET | Ser check with tool a |
| /api/command | POST | Execute arbitrary commands with caching |
| /api/telemetry | GET | System performance metrics |
| /api/cache/stats | GET | Cache performance statistics |
| /api/intelligence/analyze-target | POST | AI-powered target analysis |
| /api/intelligence/select-tools | POST | Intelligent tool selection |
| /api/intelligence/optimize-parameters | POST | Parameter optimization |

Common MCP Tools

Network Security Tools:

nmap_scan() - Ad Nmap scanning with optimization

rustscan_scan() - Ultra-fast port scanning

masscan_scan() - High-speed port scanning

autorecon_scan() - Comprehensi

amass_enum() - Subdomain enumeration and OSINT

Web Application Tools:

gobuster_scan() - Directory and file enumeration

feroxbuster_scan() - Recursi discovery

ffuf_scan() - Fast web fuzzing

nuclei_scan() - scanning with templates

sqlmap_scan() - SQL injection testing

wpscan_scan() - WordPress security assessment

Binary Analysis Tools:

ghidra_analyze() - Software reverse engineering

radare2_analyze() - Ad reverse engineering

gdb_debug() - GNU debugger with exploit de

pwntools_exploit() - CTF framework and exploit de

angr_analyze() - Binary analysis with symbolic execution

Cloud Security Tools:

prowler_assess() - AWS/Azure/GCP security assessment

scout_suite_audit() - Multi-cloud security auditing

tri() - Container scanning

kube_hunter_scan() - Kubernetes penetration testing

kube_bench_check() - CIS Kubernetes benchmark assessment

Process Management

| Action | Endpoint | Description |
|--------|----------|-------------|
| List Processes | GET /api/processes/list | List all acti |
| Process Status | GET /api/processes/status/<pid> | Get detailed process information |
| Terminate | POST /api/processes/terminate/<pid> | Stop specific process |
| Dashboard | GET /api/processes/dashboard | Li dashboard |

---

Usage Examples

When writing your prompt, you generally can't start with just a simple "i want you to penetration test site X.com" as the LLM's are generally setup with some level of ethics. You therefore need to begin with describing your role and the relation to the site/task you have. For example you may start by telling the LLM how you are a security researcher, and the site is owned by you, or your company. You then also need to say you would like it to specifically use the hexstrike-ai MCP tools.
So a complete example might be:

Real-World Performance

| Operation | Traditional Manual | HexStrike v6.0 AI | Impro |
|-----------|-------------------|-------------------|-------------|
| Subdomain Enumeration | 2-4 hours | 5-10 minutes | 24x faster |
| Scanning | 4-8 hours | 15-30 minutes | 16x faster |
| Web App Security Testing | 6-12 hours | 20-45 minutes | 18x faster |
| CTF Challenge Solving | 1-6 hours | 2-15 minutes | 24x faster |
| Report Generation | 4-12 hours | 2-5 minutes | 144x faster |

Success Metrics

Detection Rate: 98.7% (vs 85% manual testing)

False Positive Rate: 2.1% (vs 15% traditional scanners)

Attack Co: 95% (vs 70% manual testing)

CTF Success Rate: 89% (vs 65% human expert a)

Bug Bounty Success: 15+ high-impact discovered in testing

---

HexStrike AI v7.0 - Release Coming Soon!

Key Impro & New Features

Streamlined Installation Process - One-command setup with automated dependency management

Docker Container Support - Containerized deployment for consistent en

250+ Specialized AI Agents/Tools - Expanded from 150+ to 250+ autonomous security agents

Nati Client - Full-featured Application (www.hexstrike.com)

Ad Web Automation - Enhanced Selenium integration with anti-detection

Ja Runtime Analysis - Deep DOM inspection and dynamic content handling

Memory Optimization - 40% reduction in resource usage for large-scale operations

Enhanced Error Handling - Graceful degradation and automatic recovery mechanisms

Bypassing Limitations - Fixed limited allowed mcp tools by MCP clients

---

Troubleshooting

Common Issues

1. MCP Connection Failed:

2. Security Tools Not Found:

3. AI Agent Cannot Connect:

Debug Mode

Enable debug mode for detailed logging:

---

Security Considerations

⚠️ Important Security Notes:

This tool provides AI agents with powerful system access

Run in isolated en or dedicated security testing VMs

AI agents can execute arbitrary security tools - ensure proper o

Monitor AI agent acti through the real-time dashboard

Consider implementing authentication for production deployments

Legal & Ethical Use

✅ Authorized Penetration Testing - With proper written authorization

✅ Bug Bounty Programs - Within program scope and rules

✅ CTF Competitions - Educational and competiti

✅ Security Research - On owned or authorized systems

✅ Red Team Exercises - With organizational approval

❌ Unauthorized Testing - Never test systems without permission

❌ Malicious Acti - No illegal or harmful acti

❌ Data Theft - No unauthorized data access or exfiltration

---

Contributing

We welcome contributions from the cybersecurity and AI community!

De Setup

Priority Areas for Contribution

🤖 AI Agent Integrations - Support for new AI platforms and agents

🛠️ Security Tool Additions - Integration of additional security tools

⚡ Performance Optimizations - Caching impro and scalability enhancements

📖 Documentation - AI usage examples and integration guides

🧪 Testing Frameworks - Automated testing for AI agent interactions

---

License

MIT License - see LICENSE file for details.

---

<di="center">

🔗 Original HexStrike Repository

This is a fork with BOAZ red team integration. For the official HexStrike AI project, visit:

Official HexStrike AI Repository

---

Made with ❤️ by the cybersecurity community for AI-powered security automation

*HexStrike AI v6.0 with BOAZ Red Team Integration - Where artificial intelligence meets cybersecurity excellence*

</div>

项目信息

开发语言：C++

Star 数：164

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕 AI-powered MCP penetration testing framework combining HexStrike's 150+ security tools with BOAZ's advanced payload evasion (77+ loaders, 12 encoders). Features 12+ autonomous AI agents for bug bounty, CTF, CVE intelligence, exploit generation, and red team operations.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。